bf358803a5f9df0ac96835045be35ded_JaffaCakes118 | Triage

Sharing

General

Target

bf358803a5f9df0ac96835045be35ded_JaffaCakes118
Size

20KB
MD5

bf358803a5f9df0ac96835045be35ded
SHA1

b599e680181b45184e4af0b590905d33a485b1d7
SHA256

a04af29c4a6f4214f1ea894a6956f8f50ab0fe105db6ab5191ef941d55961684
SHA512

2bd188a10147967b2bb21ae71312e222cb47081b2a2a3b52dfcdb22c615abbc88687c050fb369fe621f27ef1f5854b07d25f452ebfcb133d4d162c2726604133
SSDEEP

384:TfkRoEwUrTQ/WrVCqaFlWZyJLk24jXPlra3XECTEi5Tpq1cgWnF:IR7rTxmaA2XPEEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf358803a5f9df0ac96835045be35ded_JaffaCakes118

Files

bf358803a5f9df0ac96835045be35ded_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ac!d!c\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ